
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
File: 09F7B3237C248B53A3ADBB771E63C783610963AB.mft (raw, json)
Hash identifier: YkOc5jMEnyAuQ8vv1YVExfQIBUbYZH05lTyE34IUKLs=
Subject key identifier: C0:B7:AC:DE:D2:00:EB:53:7E:4D:8B:4E:E2:F4:3E:48:28:BD:65:92
Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Certificate serial: 48C9971FD0FB8F2ABDD115FA6CBAEDFA9CAB7607
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
Manifest number: 0113
Signing time: Wed 29 Jul 2026 10:59:13 +0000
Manifest this update: Wed 29 Jul 2026 10:54:13 +0000
Manifest next update: Thu 30 Jul 2026 13:29:13 +0000
Files and hashes: 1: 3130332e3231382e39322e302f32322d3234203d3e20313532303932.roa (hash: 7PdhqnV2l2jKzSZE5Z7yfjdf74Fm6//1bWgJ6GsNP0w=)
2: 3130332e3133392e39322e302f32332d3234203d3e20313532303932.roa (hash: ra0icXJ5xGSOzhteNAmtCBMHWBmiCd3UoFJwQ8sQDb0=)
3: 3130332e3139372e3138302e302f32322d3234203d3e20313532303932.roa (hash: B6x/uDECE7+Fg5u7tyvLoqu43JaKthAEheYeLJj7NRQ=)
4: 09F7B3237C248B53A3ADBB771E63C783610963AB.crl (hash: 7II0/9GJkoVIFlrupLhcrKkWeKtFf2FIfaAQ9isuQFQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 13:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c9:97:1f:d0:fb:8f:2a:bd:d1:15:fa:6c:ba:ed:fa:9c:ab:76:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Validity
Not Before: Jul 29 10:54:13 2026 GMT
Not After : Jul 30 13:29:13 2026 GMT
Subject: CN=C0B7ACDED200EB537E4D8B4EE2F43E4828BD6592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:00:08:ad:2c:46:cf:2c:ab:64:42:29:1e:
a2:81:a1:a7:c9:97:3e:a6:d6:f1:b5:88:37:ff:2d:
0e:db:a2:d5:a3:af:05:bd:ce:10:ef:e4:92:74:a9:
8a:b5:56:ad:be:b8:92:18:53:f0:af:30:dc:c7:c4:
f9:63:c5:f6:80:04:57:38:77:46:b1:9f:bd:63:9d:
7d:7a:05:79:b5:1d:2c:69:3e:62:25:9b:91:f3:5d:
e6:11:49:3a:ad:0e:09:b2:c2:45:37:6f:7f:09:10:
e7:38:c4:be:97:2b:e0:07:b4:7a:92:54:55:5f:f0:
bb:cf:09:53:c5:e9:3c:8d:92:3b:ef:5e:c4:43:e1:
d3:6e:2a:1a:e9:13:8c:13:bf:e7:a7:1e:f1:33:45:
c1:1d:fa:49:36:9b:ce:94:6a:ff:8c:27:b9:ea:8a:
1a:7e:92:82:7b:c5:a4:4a:18:b2:cb:d0:5d:36:f8:
bd:1d:9e:6e:cf:d5:d1:c9:d6:3b:8e:de:39:a1:91:
1c:55:51:59:20:9f:f6:dd:5c:42:4d:32:24:11:74:
64:65:07:e3:90:cc:29:3d:89:86:fa:a5:26:59:96:
1b:56:ce:b4:4c:23:c6:1c:5c:8f:20:3f:e8:6a:da:
f8:f5:8b:fa:80:a4:92:25:29:2f:68:63:1d:bc:af:
58:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B7:AC:DE:D2:00:EB:53:7E:4D:8B:4E:E2:F4:3E:48:28:BD:65:92
X509v3 Authority Key Identifier:
keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cf:7d:52:73:0e:8b:ec:80:dd:ac:f4:85:8d:f3:3a:c3:60:
0c:e9:1b:f5:4c:de:b1:96:4a:0b:0e:89:8a:be:00:7b:66:bb:
4e:f8:b0:c1:8e:22:91:3b:eb:31:b4:38:84:5c:34:4b:fe:f8:
97:7a:69:4d:a6:92:d4:32:b4:82:88:cf:9b:52:9c:25:80:31:
39:4b:b7:3c:d0:44:20:94:b3:c2:f0:8c:22:52:e7:4b:97:62:
75:82:19:f0:42:f0:77:05:a9:b2:71:2d:02:e4:a2:4b:8b:91:
e0:70:42:58:b6:25:c7:21:ea:b6:5b:ec:8c:80:8c:10:a8:7f:
c6:40:98:a6:a1:94:db:9a:4d:83:88:fa:44:14:4f:40:2f:a4:
d1:a5:b3:c2:ca:46:67:04:b6:09:87:0c:07:39:cb:bc:27:2a:
82:9f:a9:cf:b7:a9:c2:f0:64:f5:05:11:8b:25:ae:e3:e7:5c:
8c:27:37:58:4e:98:8f:84:fd:53:28:36:27:33:f7:e4:71:bc:
43:08:2d:58:63:1e:3b:fd:e5:11:e3:42:fb:04:97:89:a0:c7:
48:39:7a:14:65:e8:15:3c:60:aa:be:92:91:3a:43:44:52:76:
b9:1c:49:5b:cd:8a:73:1c:61:a2:0c:8b:51:9c:e2:dc:06:b7:
17:06:77:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:04:56 2026 by rpki-client